---
title: Assigning Single Connect Credentials to Target System Accounts
slug: reference-guide-3-0-0/IB03-assigning-single-connect-credentials-to-target-system-accounts
description: Learn how to use the Assigned Credential feature in Single Connect for efficient user-device matching. This document offers detailed guidelines on configuring and enabling the feature for device groups, as well as setting up assigned credentials for vario
docTags: 
createdAt: 2022-07-27T15:23:10.000Z
---

In some cases, Single Connect users can be connected to target devices with different credentials. In other situations, there can be more than one privileged user account in the target system, with different user groups using different privileged accounts to log in to target systems. The Assigned Credential feature matches the Single Connect users with target device users.

In the example below, User A wants to connect to the target system with Account X and User B wants to connect to the target device with Account Y. In this case, User A is assigned to
Account X and User B is assigned to Account Y.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/-W5XlQP-lsZHHd0kExWNM_image.png" size="94" width="855" height="611" caption="Assigned Credentials" position="center" showCaption="true"}

The following steps should be followed to configure the Assigned Credential feature, and enable its use for a device group (this device group should be added to a device group realm with the user group including the users, beforehand).

1. Log in to the Single Connect Web GUI as an admin user.
2. Navigate to **Device Management **> **Device Groups**.
3. Right-click the desired Device Group and select **Show Properties**.
4. Save the** addAssignedCredentialToUserSelection** property as **true**.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/2hdATixFyPgvx9AKntxG2_image.png" size="86" width="855" height="395" caption="Assigned Credential Configuration" position="center" showCaption="true"}

To set up assigned credentials for different users, first save the SAPM or Secret Data Vault accounts.** SAPM** is used for passwords that are being rotated by the Password Manager, while **Secret Data Vault** can be used for static usernames and passwords. Once these accounts are saved, follow these steps:

1. Log in to the Single Connect Web GUI as an admin user
2. Configure **SAPM** or **Secret Data Vault **accounts for the target system.
3. Navigate to** User Management **> **Assigned Credential**.
4. Start typing the username in **User** text box, matching users will appear below. Select the one for whom another credential will be assigned
5. Select **SAPM** or** Secret Data Vault** as the Credential Source.
6. According to the selection above, either select the **SAPM Username** or **Secret Data Vault** name and click** Save**.
   After completing these steps, whenever the Single Connect users defined in the steps above are attempting to open an RDP session, the assigned credentials can be used for the connection.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/lW839DAoR8XYyBk-MUJ4s_image.png" size="90" width="980" height="311" caption="Assigned Credential Configuration" position="center" showCaption="true"}